Update npm packages (major) by renovate[bot] · Pull Request #368 · voidzero-dev/void

renovate · 2026-10-05T00:18:15Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@cloudflare/workers-types	`^4.20260702.1` → `^5.0.0`
@sveltejs/adapter-cloudflare (source)	`7.2.9` → `8.0.0`
@sveltejs/kit (source)	`2.62.0` → `3.0.0`
typescript (source)	`6.0.3` → `7.0.2`

Release Notes

cloudflare/workerd (@cloudflare/workers-types)

sveltejs/kit (@sveltejs/adapter-cloudflare)

`v8.0.0`

Compare Source

Major Changes

breaking: minimum Wrangler version required is 4.118.0 (#16668)
breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)
breaking: upgrade @cloudflare/workers-types to 4.20260219.0 (#15347)
breaking: upgrade minimum wrangler version to ^4.67.0 (#15347)
breaking: remove platform.context in favour of platform.ctx (#15347)
breaking: remove cloudflare platform, emulate the cloudflare:workers module instead (#16754)
breaking: require SvelteKit 3 (#15506)
breaking: remove use of the Cloudflare Workers Cache API in favour of Workers Caching (#16640)
breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

Patch Changes

chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)
chore: bump @cloudflare/workers-types to 4.20260621.1 (#16455)
fix: dispose the platform proxy when the Vite dev or preview server closes (#17238)
fix: avoid overriding user's existing _headers rules (#16183)
chore: check the WORKERS_CI environment variable to determine if we're building for Cloudflare Workers (#13733)
fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)
fix: avoid caching immutable asset 404s (#16627)
chore: use builder.config to access SvelteKit config settings (#16895)
chore: bump @cloudflare/worker-types to 5.20260809.1 (#16745)
Updated dependencies:
- @sveltejs/kit@3.0.0

sveltejs/kit (@sveltejs/kit)

`v3.0.0`

Compare Source

Major Changes

breaking: move remote function types to $app/server (#16740)
breaking: remove experimental.handleRenderingErrors flag (#16265)
breaking: make getRequest and setResponse synchronous (#16280)
breaking: TypeScript 6 is now the minimum required version (#15930)
breaking: refresh all load functions/queries when clicking a link to the current URL (#16572)
breaking: move remote function types to $app/server (#16764)
breaking: upgrade to cookie v2. Cookie names must now contain only ASCII characters (#13386)
breaking: require Node 22 or newer (#12548)
major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)
breaking: remove the preloadStrategy option. modulepreload will always be used (#15256)
breaking: default the cookie path option to '/' (#15398)
breaking: remove @sveltejs/kit/node/polyfills (#15430)
breaking: add config.kit.output.linkHeaderPreload to preload using the Link header (#15939)
breaking: require @sveltejs/vite-plugin-svelte v7 (#15371)
breaking: make page.url immutable on a type level (#16256)
breaking: remove base, assets, and resolveRoute from $app/paths (#15507)
breaking: remove createEntries from the Builder object passed to adapter functions (#15509)
breaking: return no content for 204 responses (#16200)
breaking: rename Pathname type to Path and Asset to AssetPath (#16430)
breaking: remove leading / from Path and AssetPath
breaking: handle's resolve is now typed to always return a Promise (#16352)
breaking: remove Server constructor and SSRManifest from public types (#16876)
breaking: require Svelte config options to be passed through the Vite plugin (#16007)
breaking: form action responses now use the HTTP status code returned from fail (#16200)
breaking: write tsconfig to node_modules/$app/tsconfig (#16458)
breaking: move defineParams and associated types to @sveltejs/kit/params (#16716)
breaking: remove the deprecated CSRF checkOrigin option in favor of trustedOrigins (#15437)
breaking: the delta property now only exists for popstate navigation events (#15522)
breaking: change form.error type from any to App.Error | undefined (#16245)
breaking: remove deprecated pragma header in version polling for improved CORS support (#15428)
breaking: goto now rejects when called with a URL that does not resolve to a route within the app, matching the existing behaviour for external URLs (#16164)
breaking: run all errors through the handleError hook (#16664)
breaking: require Svelte 5.56.4 or newer (#15371)
breaking: error on event.url, event.params and event.route access inside queries (#16452)
breaking: enhanced cross-page form actions now navigate to the action page on success and failure, matching native form behavior (#16684)
breaking: delete $service-worker module (#16450)
breaking: move defineEnvVars to @sveltejs/kit/env (#16375)
breaking: nested server-only directories (#15685)
feat: allow adapters to provide additional Vite plugins (#16206)
breaking: replace the $lib alias with #lib and remove files.lib config. (#16360)
breaking: remove #lib definition from paths; requires explicit module extensions as a result (#16736)
chore: change error, isHttpError, redirect, and isRedirect to refer to public type instead of internal class (#13036)
breaking: move hooks-related types to @sveltejs/kit/hooks (#16737)
breaking: add 'error' result type to preloadData (#12579)
breaking: detect new deployments on data, remote, and form action responses, tab focus, and visibility change, and default version.pollInterval to 1 hour (#16496)
breaking: disallow cross-origin form submissions without a Content-Type header (#16347)
breaking: Server-only directories (/server/ in the path) are now treated as server-only everywhere inside the project (except src/routes and the assets directory) (#16360)
breaking: config exported from a universal route file takes precedence over a server one (#16400)
breaking: require Vite 8. Provides new functionality even for existing Vite 8 users such as faster builds with Vite hook filters and more powerful SvelteKit adapters with the Vite environment API (#15371)
breaking: remove data-sveltekit-* option 'off' in favour of false (#15907)
breaking: move tracing out of the experimental namespace and remove the instrumentation flag (#16260)
breaking: add kit.paths.origin config option, remove kit.prerender.origin and the adapter-node ORIGIN environment variable (#16161)
breaking: move Page, ReadonlyURL and ReadonlyURLSearchParams from @sveltejs/kit to $app/state (#16694)
breaking: remove $app/stores (#15499)
breaking: add refreshAll and deprecate invalidateAll (#16289)
breaking: reject query parameters beginning with x-sveltekit- (#17125)
breaking: disallow *.remote.ts/js files unless experimental.remoteFunctions is enabled (#16247)
breaking: replace the noScroll and keepFocus options of goto with a single reset option, and the data-sveltekit-noscroll and data-sveltekit-keepfocus attributes with data-sveltekit-reset (#16558)
breaking: don't abort navigation when calling invalidate(All) during navigation (#16188)
breaking: consistent special filename patterns (#16382)
breaking: allow handleError to influence status code (#16162)
breaking: delegate CORS handling to Vite for static directory requests during development (#16357)
breaking: require vite@^8.0.12, the first Vite 8 release bundling stable rolldown 1.0.0 (#16134)
breaking: only include routes with a +page or +server in RouteId (#16580)
breaking: require Node 22.17 (#16597)
breaking: deprecate error(status, {...}) in favour of error(status, message, {...}) (#16540)
breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)
breaking: forbid external redirects by default (#16198)
breaking: separate adapter Vite plugins into pre and post (#16711)
breaking: remove param files in folder in favor of params.js/ts file (#16189)
breaking: move env-related types to @sveltejs/kit/env (#16739)
breaking: preloadCode now takes a route ID (e.g. /blog/[slug]) instead of a pathname. Route IDs are not prefixed with paths.base (#16576)
breaking: move BeforeNavigate, OnNavigate, AfterNavigate, Navigation, NavigationTarget, NavigationType, GotoOptions and the Navigation* variant types from @sveltejs/kit to $app/navigation (#16694)
breaking: move ActionResult and SubmitFunction from @sveltejs/kit to $app/forms (#16694)
breaking: remove handleValidationError and pass remote function validation errors to handleError with kind: 'validation' (#16672)
breaking: remove deprecated .run() method from live queries (#16573)

Minor Changes

feat: allow hyphens in param and matcher names (#16284)
feat: add $app/manifest module with immutable, assets, prerendered, and routes exports (#16372)
feat: ignore files with + prefix if they contain test/spec/stories (#16715)
feat: add ErrorProps to generated types (#16272)
feat: support sourcemaps in production (#16412)
feat: return the list of compressed files from builder.compress (#16566)
feat: better response logging (#16744)
feat: warn when tsconfig doesn't exclude service worker (#16645)
feat: validate that all remote form fields were created with form.fields.foo.as(...) (#16331)
feat: support function validators for environment variables (#16402)
feat: use type: 'module' for service worker registrations (#16169)
feat: allow adapters to receive the Svelte config as a function argument when adding Vite plugins (#16986)
feat: add shallow routing to goto and deprecate pushState and replaceState (#16449)
feat: abort request.signal when the response closes prematurely, via a new response option for getRequest (#16793)
feat: make $app/paths importable in service workers (#16441)
feat: pass the project-relative source filename to the preload filter for fonts (#16443)
feat: preserve page state set through goto(..., { state, persistState: true }) across reloads (#16449)
feat: reinstate $env/static/private, $env/dynamic/private, $env/static/public, $env/dynamic/public and $app/environment as deprecated aliases for $app/env/private $app/env/public and $app/env (#16334)
feat: add page and endpoint booleans to $app/manifest's routes, and export a ManifestRoute type (#16594)
feat: $app/service-worker module (#16458)
feat: resolve paths using the Vite config root option instead of process.cwd() to better support monorepo configurations such as Vitest workspaces (#15469)
feat: better error logging (#16374)
feat: add PageRouteId and EndpointRouteId to $app/types (#16594)
feat: better tsconfig validation (#16458)
feat: add dirty() property to form fields (#16208)
feat: support the QUERY HTTP method in +server.js (#16782)
feat: allow adapters to override getRequest and setResponse during vite dev and vite preview (#16753)
chore: deprecate Response helpers in favor of platform-provided alternatives (#15448)
feat: add cookies.parse method (#16203)
chore: deprecate export const snapshot in favour of the snapshot helper (#16687)
feat: add snapshot helper to $app/navigation (#16685)
feat: support custom values in page.state via transport hook (#16662)
fix: default cookies to secure to false during development (#16462)
feat: warn when naively proxying requests that result in responses with a content-encoding header (#16633)
feat: accept the checked state as a third argument to .as('radio', ...) and .as('checkbox', ...) so that these inputs reset to it after a submission (#16926)
feat: add an applyReroute helper for adapters that support split serverless function deployments (#16665)

Patch Changes

fix: prevent scheme-like path segments from causing off-site trailing-slash redirects (#17294)
chore: share the action error result between form actions and remote forms (#16835)
fix: persist global app state across module graph reloads (#16663)
fix: generate valid Path types for routes with optional or rest params, several params in one segment, or escape sequences (#16577)
fix: coerce values typed into remote form fields, and only apply the default given to .as() until the field is edited (#16939)
fix: blur focused SVG elements before the DOM update on navigation (#16983)
fix: support bigint params in server-side route resolution (#17130)
chore: build streamed responses from async generators (#16847)
fix: generate types when dev server starts (#17034)
fix: allow undefined values to be passed to form field .as(...) where applicable (#15681)
fix: respect paths.relative during development for client files (#17053)
fix: validate prerender concurrency (#17145)
chore: deprecate builder.rimraf and builder.mkdirp in favour of node:fs methods (#16610)
fix: manipulate stack trace for errors that happen while generating prerender inputs (#17113)
fix: don't treat callable standard schemas as function param matchers (#16403)
fix: prevent non-redirect enhanced form results from navigating to another origin (#17293)
fix: clarify circular imports from src/env (#17014)
fix: keep memory flat when precompressing many files (#16993)
fix: render remote form actions while prerendering (#17139)
fix: ignore Vitest browser loader HTML transforms (#17092)
fix: prevent failed link preloads from causing unhandled promise rejections in production (#17181)
fix: resolve generated rootDirs from the project root (#17242)
fix: generate route resolution modules as siblings of .html pages (#16674)
perf: parse large streamed frames in linear time (#16489)
fix: keep at most one pending body read at a time when deserializing binary forms (#16783)
fix: escape cache-control headers in prerendered HTML (#17293)
fix: decode all numeric character references, including above ffff, when crawling prerendered pages (#16611)
fix: enforce request body size limits when Content-Type is absent (#17127)
fix: include queries refreshed from within another query in the serialized response (#16461)
fix: reject malformed streamed data encoding (#16423)
perf: cache the default cookie header parse and avoid allocations in cookies.get (#16341)
fix: exclude deleted cookies from cookies.getAll() so it stays consistent with cookies.get() (#16297)
fix: hide stack traces for internal errors like 404s (#16411)
chore: deduplicate repeated CSP directive handling (#16498)
fix: render the nearest error page when a form submission receives a non-ActionResult error response (#16308)
chore: bump mrmime to 2.0.1 (#16745)
fix: correctly implement Vite plugin hook filters (#16760)
fix: ignore nested outDir files outside generated (#17150)
fix: defer query.refresh() in server commands until after the command body completes (#16225)
fix: drain unconsumed request bodies so keep-alive connections don't hang (#16170)
fix: keep history.scrollRestoration set to manual when leaving the page, so a document restored from the back/forward cache does not fall back to browser scroll restoration (#17244)
fix: resolve service worker and tsconfig.json based on Vite root setting (#16229)
fix: rebuild the dev manifest when route files disappear during an incremental update (#16643)
breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)
fix: only print prerender progress newline when necessary (#16766)
perf: match only unpaired surrogates when escaping HTML (#16407)
fix: treat data: protocol URLs as external for redirect (#16392)
chore: deduplicate request hashing for serialized fetch responses (#16499)
fix: d

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cloudflare-workers-and-pages · 2026-10-05T00:19:31Z

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-major-npm-packages-void-cloud.voidzero-docs.workers.dev (commit `dbf6479`)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://76019495-void-cloud.voidzero-docs.workers.dev	`dbf6479`	2026-10-05T01:16:53.105Z	Visit the dashboard ↗
Build: Success ✅ Deployment: Success ✅ View logs ↗	https://4f3db8e9-void-cloud.voidzero-docs.workers.dev	`db22db1`	2026-10-05T00:19:24.757Z	Visit the dashboard ↗

renovate Bot enabled auto-merge (squash) October 5, 2026 00:18

Update npm packages

dbf6479

renovate Bot force-pushed the renovate/major-npm-packages branch from db22db1 to dbf6479 Compare October 5, 2026 01:15

cpojer closed this Oct 5, 2026

auto-merge was automatically disabled October 5, 2026 07:03
Pull request was closed

renovate Bot deleted the renovate/major-npm-packages branch October 25, 2026 02:30

Navigation Menu

Repository navigation

Update npm packages (major) - #368

Update npm packages (major)#368
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-npm-packages

renovate Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Major Changes

Patch Changes

Major Changes

Minor Changes

Patch Changes

Configuration

Uh oh!

cloudflare-workers-and-pages Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://renovate-major-npm-packages-void-cloud.voidzero-docs.workers.dev (commit dbf6479)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Oct 5, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Oct 5, 2026 •

edited

Loading

Preview URL: https://renovate-major-npm-packages-void-cloud.voidzero-docs.workers.dev (commit `dbf6479`)